Approved changes feed: RSS · Atom
cpe:2.3:a:paytium:paytium:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Paytium (76b384a6-e1cb-53a8-8bfc-4618ac099215) |
|---|---|
| Product | Paytium (b75f1a41-37b0-53d4-b9aa-de144930cf4f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-25099 |
vulnerable | 2026-06-08 06:31:22.138565 |
WordPress Paytium: Mollie payment forms & donations Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David de Boer Paytium: Mollie payment forms & donations allows Stored XSS.This issue affects Paytium: Mollie payment forms & donations: from n/a through 4.4.2.
Published: 2024-03-13T16:02:20.549Z
Updated: 2026-04-28T16:09:12.507Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7294 |
vulnerable | 2026-06-08 06:21:57.496957 |
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'
HIGH (7.1)
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to create a mollie payment profile.
Published: 2024-10-16T06:43:46.535Z
Updated: 2026-04-08T17:34:35.501Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7293 |
vulnerable | 2026-06-08 06:21:57.496521 |
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_mollie_account_details'
MEDIUM (4.3)
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to verify the existence of a mollie account.
Published: 2024-10-16T06:43:46.043Z
Updated: 2026-04-08T17:32:14.046Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7292 |
vulnerable | 2026-06-08 06:21:57.496046 |
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_notice_dismiss'
MEDIUM (4.3)
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to dismiss admin notices.
Published: 2024-10-16T06:43:45.569Z
Updated: 2026-04-08T17:31:12.791Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7291 |
vulnerable | 2026-06-08 06:21:57.495717 |
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_account'
HIGH (7.1)
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level access to set up a mollie account.
Published: 2024-10-16T06:43:43.626Z
Updated: 2026-04-08T17:25:46.023Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7290 |
vulnerable | 2026-06-08 06:21:57.495132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7289 |
vulnerable | 2026-06-08 06:21:57.494719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7288 |
vulnerable | 2026-06-08 06:21:57.494123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7287 |
vulnerable | 2026-06-08 06:21:57.493670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4042 |
vulnerable | 2026-06-08 05:51:36.610302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.